7812 
7813 


7823| 10/4/2016] 13:27:05|From: asands To: sjhellman one of those IP addresses is alfa bank, the other is some home IP address in 
moscow 
10/4/2016] 13:27:24| From: asands To: sjhellman we are going through the logs you sent and including those two additional 
IPs. 


10/4/2016] 13:27:31} From: asands To: sjhellman | think its a big nothing sandwich 


10/4/2016] 13:28:07|From: asands To: sjhellman sorry, not the logs you sent, the logs we received from central dynamics 


7827| 10/4/2016] 13:28:32]From: asands To: sjhellman we are going through and looking for any Alfa bank activity at all, but we got 
a report on the Alfa Bank side that they also think this is nothing 


10/4/2016| 13:29:17] From: sjhellman To: asands 


10/4/2016 
7831| 10/4/201 
783 
783 


doing now 
oh nice you found tyhe "source?" 


Excerpt of FBI-DWS-EC-00000192 SECRET.NF.OC.FISA Hellman_Lync 


No. 1:21-cr-00582-CRC (D.D.C.) DX-534_0001 


7837| 10/4/2016] 13:30:42[From: asands To: sjhellman ope 
10/4/2016] 13:30:45|From: sjhellman To: asands | 
10/4/2016| 13:30:47 |From: sjhellman To: asands 


7840| 10/4/2016] 13:30:56|From: asands To: sjhellman it looks like the clearing house in London received the same/ similar white 


paper 
10/4/2016| 13:30:57 |From: sjhellman To: asands I'm working with LA on them too 
10/4/2041 
7843 


7 
13:31:01] From: sjhellman To: asands omg 
10/4/2016| 13:31:09|From: asands To: sjhellman and contacted their reps at alfa bank 
1}F 


13:31:11]From: sjhellman To: asands just garbage 


13:31:20]From: asands To: sjhellman | 
13:31:28|From: sjhellman To: asands 


10/4/201 From: asands To: sjhellman we have the findings, adn teh answer is, "this is nothing" 
10/4/201 From: sjhellman To: asands absurd they paid $80k 

F 
F 


(=>) 


: 


(=>) 


DIDO 


10/4/201 
10/4/201 
10/4/201 


Ov} AIO] A] | 


7849| 10/4/2016] 13:31:45|From: asands To: sjhellman 
10/4/2016] 13:31:49] From: asands To: sjhellman yes, completely absurd 
10/4/2016} 13:31:58]From: asands To: sjhellman | think we are underpaid, haha 


(o> Ke2] 


7852| 10/4/2016] 13:34:34|From: asands To: sjhellman if you dont mind, | may ask you to take a look at the results of our analysis of 
the logs and check to make sure we arent missing anything 


7853] 10/4/2016] 13:35:29]From: asands To: sjhellman | ahve one of our computer scientists going through it now, but U dont know 
if we are just trying to disprove the claims in the whitepaper or look for 
anything suspicious. if we find anything | would aprpeciate a second opinion. 


10/4/2016| 13:35:58] From: sjhellman To: asands 
10/4/2016| 13:36:20|From: sjhellman To: asands couple of end goals 


but always our job is to collect information, and make decisions about its 
authenticity which we then use to make more decisions (ie to further 


| 13:37:24[From: sjhellman To: asands_ | 
10/4/2016 FANTASTIC lol, you have no idea how funny that is. they are ALWAYS 
somehow linked in with all sorts of other stuff 
REO ns gage eee | 
this one down 


Excerpt of FBI-DWS-EC-00000192 SECRET.NF.OC.FISA Hellman_Lync 


No. 1:21-cr-00582-CRC (D.D.C.) DX-534_0002 


10/4/2016| 13:38:52|From: sjhellman To: asands | hope so, what a waste of time 
10/4/201 


7862 | get to mark off open/ close a case on my log book! so thats someting 


7863 thanks again for all your help 
7867 


Excerpt of FBI-DWS-EC-00000192 SECRET.NF.OC.FISA Hellman_Lync 


No. 1:21-cr-00582-CRC (D.D.C.) DX-534_0003 


